Lucene search
+L

8 matches found

OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/09/16 6:27 a.m.•30 views

Malicious code in @prime0/inimatch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d094698410f0146ad3f51ff8860d657ca28b5f55b77ef9593b637b956996180f @prime0/inimatch is a typosquat of minimatch that behaves as a stealth remote-access agent. postinstall.js runs on npm install and POSTs a host...

6AI score
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2026/09/07 12:00 a.m.•13 views

The vulnerability of the Prisma Access Agent, a user remote access agent for corporate resources and applications, stems from an uncontrolled search path element, allowing attackers to escalate their privileges.

The vulnerability of the Prisma Access Agent, a user remote access agent, relates to an uncontrolled element of the search path. Exploiting this vulnerability can allow attackers to enhance their privileges...

8.4CVSS6.1AI score0.00115EPSS
SaveExploits0References3Affected Software1
OSV
OSV
•added 2026/07/29 12:00 a.m.•21 views

MAL-2026-11499 Malicious code in @types-beta/sdk (npm)

The npm package @types-beta/sdk is a supply-chain dropper that impersonates the trusted @types DefinitelyTyped namespace to look like a routine type-definition dependency. It bundles a Windows executable vendor/nanocache.exe and launches it as an import-time side effect: dist/index.js calls init ...

5.9AI score
SaveExploits0References5
BDU FSTEC
BDU FSTEC
•added 2026/07/10 12:00 a.m.•17 views

The vulnerability of the network traffic processing module of the PAN-OS operating system, as well as the remote access agent for users to access corporate resources and applications, allows a hacker to cause a service failure.

The vulnerability of the network traffic processing module in the PAN-OS operating system, as well as the remote access agent for users to access corporate resources and applications, involves improper handling of unusual or exceptional states. Exploiting this vulnerability can allow a malicious...

7.8CVSS6.1AI score0.00621EPSS
SaveExploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
•added 2026/06/22 12:00 a.m.•17 views

The vulnerability of the Prisma Access Agent, a user remote access agent for corporate resources and applications, stems from improper protection of the alternative path. This allows attackers to circumvent existing security restrictions.

The vulnerability of the Prisma Access Agent, a user-level remote access agent for corporate resources and applications, is related to improper protection of the alternative path. Exploiting this vulnerability allows an attacker to circumvent existing security restrictions...

7.1CVSS5.8AI score0.00095EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
•added 2026/05/25 12:00 a.m.•17 views

The vulnerability of the Prisma Access Agent, a user remote access agent for corporate resources and applications, stems from insufficient protection of operational data. This allows attackers to gain unauthorized access to protected information.

The vulnerability of the Prisma Access Agent, a user remote access agent, relates to insufficient protection of operational data. Exploiting this vulnerability can allow attackers to gain unauthorized access to protected information...

6.5CVSS5.8AI score0.00144EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
•added 2026/05/25 12:00 a.m.•17 views

The vulnerability of the user remote access agent for corporate resources and Prisma Access applications lies in authentication process errors, which allow attackers to execute “man-in-the-middle” attacks.

The vulnerability of the Prisma Access Agent, a user remote access agent, relates to errors in the certificate validation process. Exploiting this vulnerability allows an attacker to execute a “man-in-the-middle” type attack...

9.6CVSS5.9AI score0.00188EPSS
SaveExploits0References2Affected Software1
securityvulns
securityvulns
•added 2011/10/16 12:00 a.m.•76 views

SEC Consult SA-20111012-0 :: Client-side remote file upload & command execution in Microsoft Forefront UAG Remote Access Agent (CVE-2011-1969)

SEC Consult Vulnerability Lab Security Advisory 20111012-0 ======================================================================= title: Client-side remote file upload & command execution product: Microsoft Forefront Unified Access Gateway Remote Access Agent signed Java applet vulnerable versio...

9.3CVSS0.1AI score0.17309EPSS
SaveExploits4
Rows per page
Query Builder